Privacy policy

Who we are

The Caddie at Pinehurst ("The Caddie," "we," "us") is a golf companion app for Pinehurst Resort and the surrounding Sandhills courses. It runs as a native Android application and at pinehurstcaddie.com.

What we collect

We collect three kinds of data, all tied to your account:

Account data. Your Google account email, display name, and profile photo URL — used to sign you in and personalize the experience. We use Firebase Authentication for this.

Golf data. The clubs in your bag, carry distances and shot dispersion (if you import simulator CSVs), notes you keep on specific holes, scores you log, sidebets you settle, and rounds you play. All stored under your own user document in Cloud Firestore. You can export or delete this at any time.

Calendar data (optional). If you grant Calendar access, we read upcoming events from your primary Google Calendar to find events whose titles match Pinehurst tee-time patterns (e.g. "Tee Time — Pinehurst No. 2"). Only the matched events are saved as upcoming rounds. The rest of your calendar is scanned, classified, and immediately discarded — it never touches our database.

Google user data

Per Google's API Services User Data Policy, we want to be explicit about Calendar access. The Caddie requests the https://www.googleapis.com/auth/calendar.events.readonly scope.

This scope lets us:

• Read events from your calendars to identify Pinehurst tee times.

This scope does not let us:

• Create, edit, or delete any calendar events.
• Read your contacts, emails, files, or any other Google data.
• Share calendar data with any third party.

The Caddie's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalized or large language models, and we do not transfer it to third parties except as necessary to provide or improve The Caddie's user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with appropriate notice to you.

How we use it

Your data powers features that only matter to you: your bag, your scoring history, your AI practice program, your upcoming tee times. We use it to render those screens and to compute things like handicap and shot recommendations. That's it.

We do not use your data for advertising. We do not sell it. We do not transfer it to partners for their own purposes.

How we store it

Account data lives in Google Firebase Authentication. Golf data and any matched tee-time events live in Google Cloud Firestore under a document scoped to your Firebase user ID. Firestore security rules ensure that no other user can read or write to your data.

Calendar OAuth tokens are stored on your device by Google Play Services, not by us. We obtain a short-lived access token at sync time, use it once, and discard it.

Your rights

You can, at any time:

• Export your data from the About screen inside the app.
• Delete your account and all associated data by emailing us (see § 8).
• Revoke The Caddie's access to your Google Calendar at myaccount.google.com/permissions.
• Sign out of the app, which removes the cached session on your device.

Third parties

We rely on Google Firebase (Auth, Firestore) for account and data storage; Google Calendar API for tee-time sync (only with your consent); and Anthropic's Claude API to generate AI caddie recommendations from the round data you choose to send. None of these vendors receive identifying information beyond what's required to deliver the service, and none use the data to train their own models or for advertising purposes.

Contact us

Questions, deletion requests, or anything else — reach us directly.

Changes to this policy

We may update this policy as the app evolves. Material changes will be announced inside the app and reflected in the date below. Continued use after a change constitutes acceptance.